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IN THE CLAIMS 
Amended claims follow: 

1 . (Currently Amended) A computer program product for controlling a computer to 
generate mobile computing device malware definition data for use by a mobile 
computing device malware scanner executable upon a mobile computing device* said 
computer program product comprising: 

obtaining code operable to obtain from a data source master malware definition 
data, said master malware definition identifying a plurality of items of malware each 
belonging to one of a plurality of classes of malware threat; 

identifying code operable to identify one or more classes of malware threat 
against which said mobile computing device is to be protected; and 

generating code operable to generate from said master malware definition data 
said mobile computing device malware definition data, said mobile computing device 
malware definition data identifying items of malware identified within said master 
malware definition data which are within classes of malware threat against which said 
mobile computing device is to be protected; 

wherein said obtaining code, said identifying code and said generating code are 
executed by a fixed location computing device, said fixed location computer being 
operable to transfer to said mobile computing device one or more computer files 
including at least a computer file containing said mobile computer device malware 
definition data; 

wherein said fixed location computing device stores profile data identifying one 
or more different types of mobile computing device to which said fixed location 
computing device may transfer computer files and corresponding threat data identifying 
one or more classes of malware threat to which each of said mobile computing devices is 
vulnerable; 

wherein only a subset of said master malware definition data is used to geneiate 
said mobile computing device malware definition data for tailoring said mobile 
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computing device malware definition data to accommodate [only] malware threats to 
which said mobile computing device[s] is vulnerable; 

wherein said one o r more classes of malware threat a&ainst which said mobile 
computing device is to be protected are chosen according to classes of malware threat 
known to pose a problem to said mobile computing device, and classes for which it is 
desired to protect said mobile computin g device according to user defined policies . 

2. (Cancelled) 

3 , (Previously Presented) A computer program product as claimed in claim 1 , 
wherein said fixed location computing device is a user computer having communication 
link with said mobile computing device. 

4, (Previously Presented) A computer program product as claimed in claim 1 , 
wherein, when said mobile computing device is connected to said fixed location 
computing device, different versions of user generated computer files respectively stored 
by said mobile computing device and said fixed location computing device are 
synchronized. 

5. (Previously Presented) A computer program product as claimed in claim 4, 
wherein said mobile computing device malware definition data is transferred from said 
fixed location computing device to said mobile computing device during said 
synchronization. 

6> (Original) A computer program product as claimed in claim 4, when said mobile 
computing device is connected to said fixed location computing device, versions of said 
mobile computing device malware definition data stored on said mobile computing 
device and said fixed location computing device are compared, and, if said fixed location 
computing device has a more up-to-date version of said mobile computing device 
malware definition data, then said more up-to-date version of said mobile computing 
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device malware definition data is transferred from said fixed location computing device 
to said mobile computing device. 

7. (Cancelled) 

8. (Previously Presented) A computer program product as claimed in claim 1, 
wherein user controlled policy data is used in combination with said threat data to control 
against which classes of malware threat said mobile computing device is protected by 
said mobile computing device malware definition data. 

9. (Previously Presented) A computer program product as claimed in claim 1 9 
wherein said different types of mobile computing device correspond to different types of 
operating system computer program used by mobile computing devices. 

10. (Previously Presented) A computer program product as claimed in claim 1 , 
wherein said fixed location computer device detects to which mobile computing devices 
it may transfer computer files by detecting installation upon said fixed location 
computing device of one or more transfer controlling computer programs operable to 
control transfer of computer files to one or more predetermined mobile computing 
devices. 

1 1 . (Previously Presented) A computer program product as claimed in claim 1, 
wherein fixed location computing device also transfers a malware scanner computer 
program from said data source to said mobile computing device, 

12. (Previously Presented) A computer program product as claimed in claim 1, 
wherein said fixed location computing device checks for updated master malware 
definition data becoming available from said data source and, if such updated master 
malware definition data becomes available, then repeats said steps of obtaining, 
identifying and generating. 
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13. (Original) A computer program product as claimed in claim 1 1 , wherein said 
fixed location computing device checks for an updated malware scanner computer 
program becoming available from said data source and, if such an updated malware 
scanner computer program become available, then obtains said updated malware scanner 
computer program for transfer to said mobile computing device. 

1 4. (Previously Presented) A computer program product as claimed in claim 1 , 
wherein said master malware definition data is also used to protect said fixed location 
computing device from malware, 

1 5. (Previously Presented) A computer program product as claimed in claim 1, 
wherein said fixed location computing device is connected to said data source by a fixed 
internet link. 

16* (Original) A computer program product as claimed in claim 1, wherein said items 
of malware include one or more of a computer virus, a worm, a Trojan, a banned 
computer file, a banned word and a banned image. 

17. (Currently Amended) A method of generating mobile computing device malware 
definition data for use by a mobile computing device malware scanner executable upon a 
mobile computing device, said method comprising the steps of: 

obtaining from a data source master malware definition data, said master malware 
definition identifying a plurality of items of malware each belonging to one of a plurality 
of classes of malware threat; 

identifying one or more classes of malware threat against which said mobile 
computing device is to be protected; and 

generating from said master malware definition data said mobile computing 
device malware definition data, said mobile computing device malware definition data 
identifying items of malware identified within said master malware definition data which 
are within classes of malware threat against which said mobile computing device is to be 
protected; 
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wherein said steps of obtaining, identifying and generating are performed by a 
fixed location computing device, said fixed location computer being operable to transfer 
to said mobile computing device one or more computer files including at least a computer 
file containing said mobile computer device malware definition data; 

wherein said fixed location computing device stores profile data identifying one 
or more different types of mobile computing device to which said fixed location 
computing device may transfer computer files and corresponding threat data identifying 
one or more classes of malware threat to which each of said mobile computing devices is 
vulnerable; 

wherein only a subset of said master malware definition data is used to generate 
said mobile computing device malware definition data for tailoring said mobile 
computing device malware definition data to accommodate [only] malware threats to 
which said mobile computing device[s] is vulnerable; 

wherein said one or more classes of malware threat against which said mobile 
computing device is to be protected are chosen according to classe s of malware threat 
known to nose a problem to said mobile computing device^ and classes for which it is 
desired to protect said mobile computing device accord ing to user defined policies. 

18. (Cancelled) 

1 9. (Previously Presented) A method as claimed in claim 1 7, wherein said fixed 
location computing device is a user computer having communication link with said 
mobile computing device. 

20. (Previously Presented) A method as claimed in claim 17, wherein, when said 
mobile computing device is connected to said fixed location computing device, different 
versions of user generated computer files respectively stored by said mobile computing 
device and said fixed location computing device are synchronized. 
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21. (Previously Presented) A method as claimed in claim 20, wherein said mobile 
computing device mafovaie definition data is transferred from said fixed location 
computing device to said mobile computing device during said synchronization, 

22. (Original) A method as claimed in claim 20, when said mobile computing device 
is connected to said fixed location computing device, versions of said mobile computing 
device malware definition data stored on said mobile computing device and said fixed 
location computing device are compared, and, if said fixed location computing device has 
a more up-to-date version of said mobile computing device malware definition data, then 
Said more up-to-date version of said mobile computing device malware definition data is 
transferred from said fixed location computing device to said mobile computing device. 

23. (Cancelled) 

24. (Previously Presented) A method as claimed in claim 17, wherein user controlled 
policy data is used in combination with said threat data to control against which classes 
of malware threat said mobile computing device is protected by said mobile computing 
device malware definition data. 

25 . (Previously Presented) A method as claimed in claim 1 7, wherein said different 
types of mobile computing device correspond to different types of operating system 
computer program used by mobile computing devices. 

26. (Previously Presented) A method as claimed in claim 17, wherein said fixed 
location computer device detects to which mobile computing devices it may transfer 
computer files by detecting installation upon said fixed location computing device of one 
or more transfer controlling computer programs operable to control transfer of computer 
files to one or more predetermined mobile computing devices. 
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27. (Previously Presented) A method as claimed in claim 1 7, wherein fixed location 
computing device also transfers a malware scanner computer program from said data 
source to said mobile computing device. 

28. (Previously Presented) A method as claimed in claim 17, wherein said fixed 
location computing device checks for updated master malware definition data becoming 
available from said data source and, if such updated master malware definition data 
becomes available, then repeats said steps of obtaining, identifying and generating. 

29. (Original) A method as claimed in claim 27, wherein said fixed location 
computing device checks for an updated malware scanner computer program becoming 
available from said data source and, if such an updated malware scanner computer 
program become available, then obtains said updated malware scanner computer program 
for transfer to said mobile computing device, 

30. (Previously Presented) A method as claimed in claim 1 7, wherein said master 
malware definition data is also used to protect said fixed location computing device from 
malware. 

31. (Previously Presented) A method as claimed in claim 17, wherein said fixed 
location computing device is connected to said data source by a fixed internet link. 

32. (Original) A method as claimed in claim 17, wherein said items of malware 
include one or more of a computer virus, a worm, a Trojan, a banned computer file 3 a 
banned word and a banned image. 

33. (Currently Amended) Apparatus for generating mobile computing device malware 
definition data for use by a mobile computing device malware scanner executable upon a 
mobile computing device, said apparatus comprising: 
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obtaining logic operable to obtain from a data source master malware definition 
data, said master malware definition identifying a plurality of items of malware each 
belonging to one of a plurality of classes of malware threat; 

identifying logic operable to identify one or more classes of malware threat 
against which said mobile computing device is to be protected; and 

generating logic operable to generate from said master malware definition data 
said mobile computing device malware definition data, said mobile computing device 
malware definition data identifying items of malware identified within said master 
malware definition data which are within classes of malware threat against which said 
mobile computing device is to be protected; 

wherein said obtaining logic, said identifying logic and said generating logic are 
provided by a fixed location computing device, said fixed location computer being 
operable to transfer to said mobile computing device one or more computer files 
including at least a computer file containing said mobile computer device malware 
definition data; 

wherein said fixed location computing device stores profile data identifying one 
or more different types of mobile computing device to which said fixed location 
computing device may transfer computer files and corresponding threat data identifying 
one or more classes of malware threat to which each of said mobile computing devices is 
vulnerable; 

wherein only a subset of said master malware definition data is used to generate 
said mobile computing device malware definition data for tailoring said mobile 
computing device malware definition data to accommodate [only] malware threats to 
which said mobile computing device[s] is vulnerable; 

wherein said one or more classes of malware threat against which said mobile 
computing device is to be protected are chosen according to classes o f malware threat 
known to pose a problem to said mobile_c_omputing device, and classes for which it is 
desired to protect said mobile computing device according t o user defined policies. 

34. (Cancelled) 
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35. (Previously Presented) An apparatus as claimed in claim 33, wherein said fixed 
location computing device is a user computer having communication link with said 
mobile computing device, 

36. (Previously Presented) An apparatus as claimed in claim 33, wherein, when said 
mobile computing device is connected to said fixed location computing device, different 
versions of user generated computer files respectively stored by said mobile computing 
device and said fixed location computing device are synchronized. 

37. (Previously Presented) An apparatus as claimed in claim 36, wherein said mobile 
computing device malware definition data is transferred from said fixed location 
computing device to said mobile computing device during said synchronization. 

38. (Previously Presented) An apparatus as claimed in claim 36, when said mobile 
computing device is connected to said fixed location computing device, versions of said 
mobile computing device malware definition data stored on said mobile computing 
device and said fixed location computing device are compared, and, if said fixed location 
computing device has a more up-to-date version of said mobile computing device 
malware definition data, then said more up-to-date version of said mobile computing 
device malware definition data is transferred from said fixed location computing device 
to said mobile computing device, 

39. (Cancelled) 

40. (Previously Presented) An apparatus as claimed in claim 33, wherein user 
controlled policy data is used in combination with said threat data to control against 
which classes of malware threat said mobile computing device is protected by said 
mobile computing device malware definition data. 
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41. (Previously Presented) An apparatus as claimed in claim 33, wherein said 
different types of mobile computing device correspond to different types of operating 
system computer program used by mobile computing devices, 

42. (Previously Presented) An apparatus as claimed in claim 33, wherein said fixed 
location computer device detects to which mobile computing devices it may transfer 
computer files by detecting installation upoft said fixed location computing device of one 
or more transfer controlling computer programs operable to control transfer of computer 
files to one or more predetermined mobile computing devices. 

43 . (Previously Presented) An apparatus as claimed in claim 33, wherein fixed 
location computing device also transfers a malware scanner computer program from said 
data source to said mobile computing device. 

44. (Previously Presented) An apparatus as claimed in claim 33, wherein said fixed 
location computing device checks for updated master malware definition data becoming 
available from said data source and, if such updated master malware definition data 
becomes available, then repeats said steps of obtaining, identifying and generating. 

45. (Previously Presented) An apparatus as claimed in claim 43, wherein said fixed 
location computing device checks for an updated malware scanner computer program 
becoming available from said data source and, if such an updated malware scanner 
computer program become available, then obtains said updated malware scanner 
computer program for transfer to said mobile computing device. 

46. (Previously Presented) An apparatus as claimed in claim 33, wherein said master 
malware definition data is also used to protect said fixed location computing device from 
malware. 
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47. (Pf eviously Presented) The computer program product as claimed in claim 1 , 
wherein said fixed location device stores policy data including user defined settings 
identifying the manner in which said profile data is to be interpreted. 

48. (Cancelled) 
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